Add Cargo dependency audit gates

.gitea/workflows/dependency-audit.yml

@@ -15,6 +15,16 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@v4
 
+      - name: Install cargo-audit
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-audit@0.22.2
+
+      - name: Audit Rust dependencies
+        run: |
+          cargo audit
+          cargo audit --file tools/macos-packager/Cargo.lock
+
       - name: Scan dependencies for known vulnerabilities
         uses: docker://ghcr.io/google/osv-scanner:v2
         with:

.gitea/workflows/release.yml

@@ -19,6 +19,16 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Install cargo-audit
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-audit@0.22.2
+
+      - name: Audit Rust dependencies
+        run: |
+          cargo audit
+          cargo audit --file tools/macos-packager/Cargo.lock
+
       - name: Test release-note generation
         run: python3 .gitea/scripts/release.py test